vb.org Archive - Administrative and Maintenance Tools - vbStopForumSpam - known spammer lookup for new registrations

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)

- - Administrative and Maintenance Tools - vbStopForumSpam - known spammer lookup for new registrations (https://vborg.vbsupport.ru/showthread.php?t=176481)

I'm not sure if the mod is working because no log entry says denied or blocked. Right now it's set to block based on only email and not username/ip. The mod is set to "log and block registration" but allow registration for query connection errors.

The way I can tell who is a spammer is because the user name isn't linked and there's no account made - but the log for those entries still says "allowed registration". I think my vbulletin human verification is what's blocking the spam entries.

Also, what does "Result on field email - [REMOTEERR] Unverfied but allowed by policy" mean?

Quote:

Originally Posted by whatsthegoodwor (Post 2103272)

The way I can tell who is a spammer is because the user name isn't linked and there's no account made - but the log for those entries still says "allowed registration". I think my vbulletin human verification is what's blocking the spam entries.

I've noticed this happening as well, and wondered what was going on? :confused: Thanxx for the explanation, as I think my board is doing the same as well.

Otherwise, I must say: THIS IS THE SINGLE MOST IMPRESSIVE WORKING MODIFICATION I'VE EVER WITNESSED. The Logs are just amazing to read through. :eek:

:D Kudos to pedigree for such a fine product! :up:

Quote:

Originally Posted by pedigree (Post 1646247)

OK, Ive been nagged and nagged and nagged (and not by my wife this time).

Here is a small change to 0.61 that will be worked on in 0.7 that will allow you to submit spammer details to the database from the admin control panel. It requires editting admincp/user.php

http://www.fizzleblood.net/quickadd.png

These line numbers are for my 3.71 dev install, they might be a bit different depending on the version. Ive only tested it in 3.71

Find (about line 524)

Code:

// QUICK LINKS SECTION

Insert ABOVE that (but below the if ($vbulletin->GPC['userid']) { )

Code:

                // VBSTOPFORUMSPAM MOD

                if ($vbulletin->GPC['userid'] > 1) { // we dont want to ban our admin account now do we

                        print_table_header("vbStopForumSpam");

                        if ($vbulletin->options["vbstopforumspam_apikey"])

                                print_label_row('Submit these details to www.stopforumspam.com ban list<BR><table><tr><td>Username:</td><td><input type="text" name="username"  size="30" value="'. $user['username'] . '"></td></tr><tr><td>Email:</td><td><input type="text" name="email"  size="30" value="' . $user['email'] . '"></td></tr><tr><td>IP:&nbsp;</td><td><input type="text" name="ip_addr"  value="' .$user['ipaddress'] . '"></td></tr></table><input name="api_key" type="hidden" value="' . $vbulletin->options['vbstopforumspam_apikey'] .        '"><input onclick="this.form.action=\'http://www.stopforumspam.com/add.php\';this.form.submit()"  type="button" class="button" value="' . $vbphrase['submit'] . '"/>');

                        else

                                print_label_row('You need an API key from www.stopforumspam.com before you can submit to the database' ,'');

                        print_table_break('', $INNERTABLEWIDTH);        

                }

You need to have an API key... This is a quick hack that changes the pages form so that it submits to the database. As its a quick hack, this relies 100% on javascript being enabled and makes no tests that it is enabled.

if all goes well, then Ill update the first post with a copy/paste of this. Now, stop PMing me about "can I submit data directly" please :D

I have been confronted by a white page in the ACP main frame when manually submitting. It used to show the spam site telling me it was successful. What could cause the white page upon submit suddenly?

Thanks!

1. That code was turned into a plugin (by me) a couple of days later, so there's no need to edit anything. Link's in the main post, but here it is again: https://vborg.vbsupport.ru/showpost....&postcount=289

2. White page is normal for the time being. Happened after they upgraded the StopForumSpam site. If you get that page, it was successfully submitted.

Pedigree, what do you think of the following idea?

Many spammers use temporary / fake email providers. i.e. harry1234@trashmail.net
Most fake / temporary email addresses disappear after 1 day or even 5 minutes.
Serious registration use real email providers. There are many temporary email providers and they keep changing their domain names to dodge or

I believe it would help against spam and trolls if there would be a database of temporary email domains. So that if a user registers with such an email domain, the registration is denied. Like with SFS: admins could submit the temporary domains. A system could be used that when an email domain is submitted by more than X vbulletin sites, the domain is marked as a temporary/fake email.

Admins who moderate their new registrations could submit such domains with the click of a button if the 'new users moderation' queue would have a button for it. Other admins could submit trough an adminCP/modcp option.

Quote:

Originally Posted by Alfa1 (Post 2109161)

A system could be used that when an email domain is submitted by more than X vbulletin sites, the domain is marked as a temporary/fake email.

That would block sites like gmail, yahoo, hotmail, etc.

Now keeping track of sites w/ throwaway email addresses and/or super secret ones (e.g. hushmail, etc) might not be a bad idea. Could give admins the option to block registration based upon having an email address from one of those sites, and use a custom phrase for the denied reason (e.g. "You are attempting to register with a temporary email address. We require that our members use real email addresses so that if we need to contact them we can."

Popular email domains like gmail, hotmail, yahoo, etc could be white-listed. Additional checks can be built in. For example by having a small group of volunteers double-check each throwaway email domain submission. Im sure there are admins/moderators that are willing to do that, as there will not be that many new domains a month.

Another reason for this suggestion is bouncing email. If your users can sign up with fake email, then this will cause a mass of bounces to be sent to your server.
Bouncing email can cause your site to be listed as a spammer. Its bizarre but true.

Quote:

Originally Posted by Alfa1 (Post 2109202)

Another reason for this suggestion is bouncing email. If your users can sign up with fake email, then this will cause a mass of bounces to be sent to your server. Bouncing email can cause your site to be listed as a spammer. Its bizarre but true.

How is bouncing email from fake email addresses going to get you listed as a spammer? Email to the fake email address never gets anywhere to be listed as spam.

The bottom line for me is that i do not want and will not use ANY scheme which autospams bounced email. I don't even use autodelete for spam on my server because of the potential for false positives, however low that may be. I want the option to scan what's being flagged.

Or you could just use Spam-O-Matic...

I hope Pedigree does not mind me posting here, but it sounds like he is busy maintaining the code for SFS instead of interfaces to the data that he provides.

https://vborg.vbsupport.ru/showthread.php?t=248042

It does all of that without code mods. The 1.x version should be fine for your vB3 boards.

Quote:

Originally Posted by Wired1 (Post 2109160)

What a relief. :) Thank you. Was hoping it wasn't me.

I would think I need to undo those edits before installing the plugin, correct? I don't think it was a lot.....memory fuzzy. :)

J

X vBulletin 3.8.12 by vBS Debug Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (5)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (4)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages:

Phrase Groups Available:

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01984 seconds Memory Usage 1,758KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (5)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (4)pagenav_pagelinkrel (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: